Privacy Policy

Last updated: October 7, 2026

Moves is operated by Vagabond Labs, Inc. ("Moves," "we," "us," or "our"). This policy explains how we handle information in the Moves iOS app and at moves.nyc (the "Service"). Moves helps adults discover events in New York City. Contact us at kobe@moves.nyc about privacy, access, correction, or deletion.

Information we collect

Account and profile: your phone number or email for one-time-code sign-in, account identifier, age eligibility confirmation, username, optional display name, profile photo, social handles, and preferences. We also store saves, follows, blocks, event attendance or going selections, reviews, ratings, tags, reports, and other content you submit. Photos and videos can include faces, voices, and embedded metadata; remove sensitive metadata before uploading videos.

Discovery and imports: search messages, conversation context, search results and interactions, taste preferences, and any links, text, screenshots, or flyers you choose to import. Do not submit another person's private information without permission. Information you send to our iMessage discovery service includes your message, attachments, and sender identifier; your messaging provider also handles those messages under its own policy.

Tickets and hosting: for tickets offered through Moves, we store order and ticket identifiers, event, tier, quantity, price, payment or refund status, and admission records. Stripe processes payments. We receive transaction references and status, not your full card number or card security code. Hosts who choose payouts provide financial and verification information directly to Stripe; Moves stores the connected-account identifier and onboarding status. External ticket sellers handle purchases on their own sites under their own policies.

Device and service information: our infrastructure processes IP addresses and request, security, and diagnostic logs to operate the Service. If you enable push notifications, we store a device push token. PostHog product analytics is enabled by default and receives account and device identifiers, page visits, clicks and other app interactions, and error/diagnostic information to help improve Moves. You can turn analytics off at any time in Settings or using the privacy choices on this page. The choice applies to this device/browser, stops future analytics collection, and preserves an existing opt-out. Session recording is disabled.

Location: with your permission, your device location can center the map and help find nearby events. Map requests go to our map provider. Nearby discovery may send location context to our backend and, when you allow AI sharing, to our AI provider. That context can be included in search records. You can decline device location access and browse using the default New York City map or a place you enter.

Contacts: if you choose to find friends from your address book, phone numbers are normalized and hashed on your device. We receive those hashes, compare them with registered members, and discard the submitted hashes after matching. We do not receive address-book names or raw address-book phone numbers, store the submitted contact list, or message your contacts. Hashing reduces exposure but does not make phone numbers anonymous. Only members with a public username can be returned as matches.

Optional connected services and AI

Onairos is optional and separate from your Moves sign-in. The Onairos SDK loads when its connection interface is displayed so its connection button is ready. If you connect services through Onairos, it processes the accounts and data you authorize in its consent flow. Moves receives connection identifiers, the categories you approved, and a persona or preference snapshot with derived taste signals for recommendations. Moves does not store the Onairos bearer token. You can remove the imported snapshot from Moves with the disconnect control; manage or revoke the underlying service connections in Onairos as well.

Before you use in-app AI discovery or AI imports, we ask permission to send search messages, relevant conversation and location context, taste preferences, and your selected import content to Anthropic. Search text may also be sent to Voyage AI to match events by meaning. You may decline and continue browsing. Turn off AI sharing in Settings or on this privacy page to stop new in-app AI requests. Your choices apply on that device. Anthropic and Voyage AI process requests under their applicable commercial terms and privacy practices. Do not include information you do not want processed by that provider. Latitude receives AI diagnostic traces, including search messages, AI inputs and responses, relevant context, model usage and performance information, to help us diagnose problems and improve recommendations. This sharing is included in the in-app AI permission. We avoid adding direct account identifiers to these traces, but the content itself may contain personal information.

Content safety screening

When you submit review photos or videos, or publish review text, Moves sends the text, photos, or sampled video frames to Anthropic to screen for objectionable content. We do not send account identifiers with these screening requests. Ordinary content is approved automatically; potentially inappropriate content is held for moderator review. Video screening checks sampled images, not every frame or the audio track, and automated screening can make mistakes. Screening failures keep content private while we retry or review it. This safety processing is separate from optional AI discovery and its device setting.

How we use information

We use information to sign you in and secure your account; deliver event discovery, personalization, imports, tickets, and hosting; display content you choose to publish; communicate about your account, purchases, and requested notifications; respond to reports and support requests; prevent fraud and abuse; improve reliability; and comply with legal obligations. Optional analytics helps us understand use of the product.

We do not sell personal information or share it for cross-company targeted advertising.

Who receives information

Your public profile, social handles, follows, public reviews, ratings, media, and public event-going activity may be visible to others, including people without an account. Private saves and private reviews are not published as your individual activity. Content can be copied by other people after publication; we cannot erase copies held independently by them.

We may disclose information where required by law, to respond to lawful requests, to prevent harm or fraud, or to protect rights. In a business transfer, information may transfer with the Service, with notice where required.

Retention and account deletion

We keep account information and associated content while your account is active or as needed to provide the Service. You can initiate permanent account deletion in Settings, then Delete Account, without contacting support. Deletion removes your account, profile, preferences, saves, reviews, uploaded personal media, connections stored by Moves, and push tokens from active systems. Personal search and conversation records are removed rather than treating removal of your account identifier alone as anonymization.

We also coordinate deletion of associated information held by our processors. Processor requests and backup removal can take additional time; deletion of your Moves account does not itself delete an independently held Stripe, Onairos, or connected-service account. Restricted backups expire under each provider's backup cycle. If a backup is restored, deletion requests must be reapplied. Contact kobe@moves.nyc for the status of a deletion request or help with information you submitted without a Moves account.

Limited records may remain when reasonably necessary for legal obligations or litigation holds, payment accounting, refunds and disputes, fraud and security investigations, or to document and complete your privacy request. A restricted do-not-contact record may remain so we do not send you future marketing messages. These records are restricted to those purposes and removed when the reason for retention ends. Public event catalog facts and statistics that cannot identify you may remain. We do not promise immediate erasure from every backup, processor, or recipient.

Your choices and rights

You can edit your profile and preferences, choose whether reviews are public, remove content, block or report users, disconnect imported taste data, and delete your account in the app. Settings and this privacy page include AI-sharing and optional analytics choices. Device settings control location, contacts, camera, microphone, photo-library, and notification permissions. Declining optional permissions does not prevent ordinary event browsing. Use unsubscribe controls where provided, or contact us to stop optional messages; sign-in and purchase communications are separate.

Depending on your state and the laws that apply, you may have rights to access, correct, delete, or obtain a copy of your personal information, opt out of certain processing, appeal a rights decision, and exercise rights without unlawful discrimination. Send requests or appeals to kobe@moves.nyc. We may need to verify your identity or an authorized agent's authority before acting. We do not require you to waive applicable privacy rights to use the Service.

Adults only

Moves is for people 18 and older. We do not knowingly permit accounts for anyone under 18. Contact kobe@moves.nyc if you believe a minor has provided information. Individual venues may require a higher age, such as 21, and valid identification; using Moves does not establish eligibility for admission or alcohol purchase.

Security and processing locations

We use access controls and encryption in transit to protect information. No service can guarantee absolute security. Moves is offered in the United States; our providers may process information in the United States and other locations where they operate, subject to applicable safeguards.

Changes and contact

We will update the date above when this policy changes and provide notice of material changes where appropriate or required. Where new processing requires consent, we will request it. Questions and privacy requests: kobe@moves.nyc.